Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3231203d3e20323632383238.roa
File:                     3137372e3135352e3139322e302f32312d3231203d3e20323632383238.roa (raw, json)
Hash identifier:          pUGIP+Ki0GlD02cH72HWiDuRlJ6E4PZFyIc6k4wppjw=
Subject key identifier:   07:37:75:82:6C:32:AF:9B:1B:B8:43:89:9A:94:46:F5:B6:BE:96:AD
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       568F993C75903989C9DD12A5B3E5EC5D60FA9C85
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3231203d3e20323632383238.roa
Signing time:             Wed 12 Mar 2025 02:31:47 +0000
ROA not before:           Wed 12 Mar 2025 02:26:47 +0000
ROA not after:            Wed 11 Mar 2026 02:31:47 +0000
asID:                     262828
IP address blocks:        177.155.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 12 Mar 2025 12:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8f:99:3c:75:90:39:89:c9:dd:12:a5:b3:e5:ec:5d:60:fa:9c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 12 02:26:47 2025 GMT
            Not After : Mar 11 02:31:47 2026 GMT
        Subject: CN=073775826C32AF9B1BB843899A9446F5B6BE96AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:e7:84:d2:29:98:0a:48:94:0f:09:8d:58:
                    81:0b:df:b7:85:ed:02:6b:8b:bd:75:db:7e:f5:6c:
                    c2:b0:14:23:f1:8c:52:5b:f6:db:1a:be:8e:b4:bd:
                    f9:fd:99:b4:28:36:53:67:54:23:0a:91:9a:3e:16:
                    a1:78:4d:fb:85:c8:6b:74:30:b6:dc:3c:cf:32:21:
                    cb:4e:73:7e:d7:5c:60:a0:8a:2a:85:ef:cf:23:c8:
                    30:61:2b:83:ff:f8:01:bc:6e:23:5f:21:cc:84:37:
                    85:75:b5:d8:15:2d:1d:43:06:53:16:c2:ff:21:46:
                    9e:e5:f8:af:c2:ac:4d:7d:25:19:f8:f2:7f:dd:8d:
                    99:1f:45:52:aa:b9:e1:ad:05:c0:a3:7d:02:27:cb:
                    09:1c:01:97:b8:ed:8f:8e:7e:19:59:6a:1c:99:5d:
                    57:77:ef:06:c2:fc:e6:42:fa:5d:c1:10:cc:7b:a5:
                    16:0f:11:35:35:b2:7d:c0:d1:0e:d9:e1:08:c1:c8:
                    87:ba:4c:24:07:97:1a:68:06:ac:e0:95:1b:15:8b:
                    37:2c:9b:42:d7:a9:c2:35:ba:bb:e7:41:a3:86:f1:
                    73:a3:57:01:a5:c2:48:44:bc:a5:5b:54:a5:a5:c0:
                    a5:5e:f7:87:86:de:da:1b:f2:8c:ae:6b:35:17:70:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:75:82:6C:32:AF:9B:1B:B8:43:89:9A:94:46:F5:B6:BE:96:AD
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3231203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:3a:11:8f:df:ff:9f:77:86:fe:fb:c8:07:3a:36:7e:d5:e3:
         ad:db:e2:09:bf:4e:d6:fd:df:33:f0:26:a7:49:c9:f9:16:6c:
         9b:14:bd:d0:fb:d8:2a:88:09:43:40:22:48:89:72:08:57:1c:
         40:58:2a:48:8b:0f:a2:f8:2c:a5:26:3f:29:fd:79:bf:03:5f:
         99:b0:ca:9e:6a:b3:07:01:eb:0b:3b:63:f2:d0:e6:ad:0e:cf:
         84:4d:91:4a:49:40:d2:21:70:42:b3:b2:a5:8c:0b:b6:b2:23:
         8c:01:bd:c7:02:48:a8:17:7a:d3:9b:b4:78:6e:8c:fc:72:28:
         98:7b:fd:0a:f7:e3:56:16:0f:d0:9d:7e:ff:2a:2d:8b:0d:8c:
         8d:04:02:21:bf:4f:47:b6:e6:0c:f6:cd:e5:26:af:ae:81:a3:
         59:d8:d4:8a:a3:1b:97:d0:ac:cb:7d:e8:67:fa:68:48:c2:18:
         bb:7f:1d:3b:a2:ef:31:3f:fb:6a:54:19:22:d4:c1:d2:d2:97:
         9e:59:54:31:5f:d9:59:aa:74:d1:31:a5:c4:5a:a7:fe:13:82:
         b6:ea:7d:e6:8a:26:37:53:aa:ed:3d:7c:3e:32:90:3e:e1:87:
         ca:05:83:95:66:fc:e0:29:d1:85:13:dd:84:90:5f:33:20:ce:
         f6:d2:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 14:49:40 2025 by rpki-client on console.sobornost.net